H3C S6550X-HI Series Command Reference Manual page 2237

display ipsec sa
Use
display ipsec sa
Syntax
display
interface-number | { ipv6-policy | policy } policy-name [ seq-number ] |
profile profile-name | remote [ ipv6 ] ip-address ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
: Displays brief information about all IPsec SAs.
brief
: Displays the number of IPsec SAs.
count
interface interface-type interface-number
number.
ipv6-policy
IPsec policy.
: Displays detailed information about IPsec SAs created by using a specified IPv4 IPsec
policy
policy.
policy-name
characters.
seq-number
65535.
: Displays detailed information about IPsec SAs created by using a specified IPsec profile.
profile
profile-name
characters.
remote ip-address
: Specifies an IPsec SA by its remote end IPv6 address. If this keyword is not specified, the
ipv6
specified remote end IP address is an IPv4 address.
Usage guidelines
If you do not specify any parameters, this command displays detailed information about all IPsec
SAs.
Examples
# Display brief information about IPsec SAs.
<Sysname> display ipsec sa brief
-----------------------------------------------------------------------
Interface/Global
-----------------------------------------------------------------------
Vlan100
Vlan100
Vlan100
to display information about IPsec SAs.
ipsec sa [ brief
: Displays detailed information about IPsec SAs created by using a specified IPv6
: Specifies an IPsec policy by its name, a case-insensitive string of 1 to 63
: Specifies an IPsec policy entry by its sequence number. The value range is 1 to
: Specifies an IPsec profile by its name, a case-insensitive string of 1 to 63
: Specifies an IPsec SA by its remote end IP address.
Dst Address
10.1.1.1
255.255.255.255
100::1/64
| count | interface
: Specifies an interface by its type and
SPI Protocol
400 ESP
4294967295 ESP
500 AH
12
interface-type
Status
Active
Active
Active